Wireshark Lab 2

Wireshark_HTTP_v6.1

1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the server running?

This image shows my browser running HTTP version 1.1.

This image shows the server using HTTP version 1.1.

 
2. What languages (if any) does your browser indicate that it can accept to the server?

Where it says Accept-Language, it lists US English as its accepted language.

 
3. What is the IP address of your computer? Of the gaia.cs.umass.edu server?

The IP address of my computer is 10.33.47.177. The IP address of gaia.cs.umass.edu is 128.119.245.12.

 
4. What is the status code returned from the server to your browser?

The status code was a 200 OK.

 
5. When was the HTML file that you are retrieving last modified at the server?

The HTML file was last modified on May 4th, 06:07:01 GMT

 
6. How many bytes of content are being returned to your browser?

128 bytes of content are being returned to my browser.

 
7. By inspecting the raw data in the packet content window, do you see any headers within the data that are not displayed in the packet-listing window? If so, name one.

No, I do not see any headers that are not displayed in the packet window.

 

8. Inspect the contents of the first HTTP GET request from your browser to the server. Do you see an “IF-MODIFIED-SINCE” line in the HTTP GET?

No, there is no “IF-MODIFIED-SINCE” line in the HTTP GET.

 
9. Inspect the contents of the server response. Did the server explicitly return the contents of the file? How can you tell?

Yes, the server explicitly returned the contents of the file. I am able to tell this because of the Line-based text data in the OK response to the GET.

 
10. Now inspect the contents of the second HTTP GET request from your browser to the server. Do you see an “IF-MODIFIED-SINCE:” line in the HTTP GET? If so, what information follows the “IF-MODIFIED-SINCE:” header?

An “IF-MODIFIED-SINCE:” line in the HTTP GET was present. The information that followed the “IF-MODIFIED-SINCE:” header that was not present in the other HTTP GET was the date it was modified, a match query, and a cache-control (I suppose this is part of why the cache had to be cleared first).

 

11. What is the HTTP status code and phrase returned from the server in response to this second HTTP GET? Did the server explicitly return the contents of the file? Explain.

The HTTP status code that the server responded with was a 200 OK, surprisingly. This means that the server explicitly returned the contents of the file. After a Google search, it appears this was not supposed to happen.

 

12. How many HTTP GET request messages did your browser send? Which packet number in the trace contains the GET message for the Bill or Rights?

My browser sent only one HTTP GET request message. Packet number 18 contained the GET message for the Bill of Rights.
13. Which packet number in the trace contains the status code and phrase associated with the response to the HTTP GET request?

Packet 23 contained the response to the HTTP GET request.

 
14. What is the status code and phrase in the response?

The status code from this packet was a 200, and the phrase was an OK.

 
15. How many data-containing TCP segments were needed to carry the single HTTP response and the text of the Bill of Rights?

3 data-containing TCP segments were needed to carry the single HTTP response and the text of the Bill of Rights.

 

16. How many HTTP GET request messages did your browser send? To which Internet addresses were these GET requests sent?

3 HTTP GET request messages were sent by my browser. It sent them to 128.119.245.12, 165.193.140.14, and 128.119.240.90. The last two gets are for the separate locations of the images on the initial web page.

 

17. Can you tell whether your browser downloaded the two images serially, or whether they were downloaded from the two web sites in parallel? Explain.

From the looks of it, it would appear they are downloaded serially. This is because a GET is sent out after an OK response is seen. From a quick Google search, it appears this is not common. The Google search suggests that these pictures were downloaded in parallel.

 

18. What is the server’s response (status code and phrase) in response to the initial HTTP GET message from your browser?

The server’s response to my HTTP GET message is a 401 Authorization Required status code and phrase.

 
19. When your browser’s sends the HTTP GET message for the second time, what new field is included in the HTTP GET message?

The new field included is the Authorization field. This provides the user name and password for a secure website.

Leave a comment